Privacy Policy

Last updated: October 26, 2026.

What we collect

• The URL you submit, a hash of your IP (for rate limiting), the scan findings (titles, severity, masked secret previews, table names), and the builder we detected.
• Optional email, only if you ask us to "email me this report".
• Payment metadata from Stripe (we never see full card numbers).

What we do not collect

• Database row contents.
• Full secret values (we store a 4+4 masked preview only).
• Passwords, cookies, or authenticated sessions from your app.

Retention

Reports are kept for 30 days, then deleted. Email leads are kept until you ask us to delete them. Payment records are kept as required for tax and fraud prevention.

Processors

Cloudflare (hosting), Stripe (payments), and — when you opt in — our email provider for the report + 3-email follow-up. We do not sell personal data.

Contact

support@leakfix.app